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(57) Abstract 

A gaming machine la 
described in which all interested 
parties to a game program to run on 
the gaming machine, will digitally 
sign each piece of approved 
software prior to installation, these 
signatures are stored with the 
software on a mass storage device 
Inside the gaming machine. When 
the machine needs to load a piece 
of software, or upon an external 
command after a significant event 
such as a Jackpot payout, It will 
execute the SHA-1 program code 
In the BPRoM on the software 
being loaded, and then perform a 
DSA verification operation using 
the SMA-I output as one of the 
parameters, the DSA verification 
operation will be repeated for every 
digital signature stored with the 
software, and all must be valid, 
so that It Is Impossible to execute 
program code that has not been 
approved by the manufacturer, 
the Jurisdictional authority and 
optionally the casino and/or other 
parties. 
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Electronic casino gaming with authentication and improved Becuvity 
Introduction 

The present invention relates generally to electronic gaming -machines 
or consoles and In particular the Invention provides an Improved system tor 
executing casino games In RAM as opposed to the conventional unalterable 
5 ROM. The Improvements provide an authentication process based upon 
digital signatures, with the US. Digital Signature Standard {DSSJ being the 
preferred means of Implementation. 

For the sake of clarity the following terms are defined for the purpose 
of this specification. 
10 A pambling machine , usually referred to as a gaming machine, is a 

traditional gaming machine. Typical examples include slot machines of the 
type made by Aristocrat Leisure Industries or 1GT. 

A casino refers to the operator of gambling machines. 
A digital signature is a pair of large numbers represented in a computer 
IS as strings of binary digits. The digital signature Is computed using a set of 
rules {i.e., the USA) and a set of parameters such that the Identity of the 
signatory and integrity of the data can be verified. 

Strong enervation Is the encryption of data such that it is 
computationally infeaslble for a third party - for example a government 
20 agency - to retrieve the encrypted data without a key. 

A hash , or message digest Is the output from a function that produces 
a value that is unique for any message Input into it A one-way hash 
produces an output that Is computationally difficult to relate to the Input It 
is also computationally difficult to produce two different messages with the 
25 same message digest 

An tmforgeable log is produced by chaining together hash values such 
that the nth entry In the log is dependent on the (n-l)'h entry, and thus 
previous entries cannot be altered without re-computlng the whole chain. 
A IoeIc cage Is a secure area Inside the gaming machine that cannot be 
30 accessed without sufficient security clearance. 
References 

M The Digital Signature Standard" U.S. federal Information Processing 
Standards Publication IBB 

"The Secure Mash Standard" U.S. federal Information Processing 
33 Standards Publication 180-1 
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"Cryptographic Support for Secure Logs on Untrusted Machines" by 
Bruce Schneler and John Kelsey (available at 
http://wwtv.counterpatie.coiM/secure-logs. html) 
Background oTtfieltivetitioit 

traditionally, microprocessor based gaming machines store their 
program contents in unalterable ROM or ERROM. During Installation and 
after a large Jackpot payout, the machine is physically Inspected and the 
ERROMs are removed, these ERROMs are placed in a verification device 
which produces an output string using a known algorithm usually referred to 
as a hash function. This string Is compared against a string that has been 
already generated when the game software was approved by the gaming 
Jurisdiction. Authentication is achieved by a match of the approved string 
and the ERROM generated string. 

Hie main disadvantage of such a system is that the current limited 
capacity of ERROM technology ensures that games cannot be as sophisticated 
as if they were stored in an alternative medium such as a hard disk or CD- 
ROM, the other problem with using RAM is that it cannot be extracted and 
placed in a verification device, since the contents of the RAM are necessarily 
volatile. 

Another system, disclosed and described in U.S. Pat No. 3,B43,OB0 
uses a private key to encrypt a message digest of the approved copy of the 
software, and thus produce an unalterable digital signature which can be 
decrypted with a corresponding public key and compared against a message 
digest generated by an unalterable ERROM in the gaming machine. 

The disadvantage of the above Invention is that it relies on strong 
encryption, currently subject to export restrictions from the U.S. and other 
countries. This software can only be signed by one party and if a single 
private key Is compromised, the whole system Is compromised. 

A related problem that exists Is that of version control. Once a gaming 
machine software program is found to be faulty, a modification or 'patch' is 
usually distributed. Unfortunately, conventional ERROM based machines, 
and the disclosed system above, have no method implemented of ensuring 
that the earlier version of the software Is not re-installed, either deliberately 
or by accident, later. Once software is approved, it is impossible for the 
machine to revoke that approval. If a rogue element was able to 'sneak past' a 
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Jurisdiction a dubious piece of software, there would be 110 way to stop it 
being used In a casino, even after detection 
Summary of the Invent! dm 

The Invention provides a gaming machine with enhanced capability 
9 for storing games due to enhanced security and authentication capabilities. 

According to a first aspect the present invention provides a 
programmable controller, including a readable and writable storage means to 
hold a program during Its execution by the programmable controller, and 
program authentication means comprising digital signature verification 
10 means which verifies a digital signature associated with the program and 
prevents execution of the program if the digital signature is not valid. 

According to a second aspect the present invention provides a method 
of verifying a program or a program component for a programmable 
controller, including a readable and writable storage means to hold a program 

19 during its execution by the programmable controller, and program 
authentication means comprising digital signature verification means which 
verifies a digital signature associated with the program, and the method 
including a step of verifying the digital signature against a key, and 
preventing execution of the program if the digital signature is not valid. 

20 Preferably, the digital signature is generated by a method that does not 
Include encryption such that de-encryption Is not performed during the 
digital signature verification. 

According to a third aspect the present invention provides a 
programmable controller, including a readable and writable storage means to 

25 hold a program during its execution by the programmable controller, and 
program authentication means comprising digital signature verification 
means which verifies each of a plurality of digital signatures associated with 
the program and prevents execution of the program If any one of the digital 
signatures is not valid. 

30 According to a fourth aspect the present invention provides a method 

of verifying a program or a program component for a programmable 
controller, including a readable and writable storage means to hold a program 
during its execution by the programmable controller, and program 
authentication means comprising digital signature verification means which 

35 verifies each of a plurality of digital signatures associated with the program, 
and the method Including steps of verifying each of the digital signatures 
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against a respective key, and preventing execution of the program if any one 
of the digital signatures Is not valid. 

Preferably the or each digital signature Is generated by a method that 
does not Include encryption such that de-encryptlon is not performed during 
S the digital signature verification. 

In one embodiment, the programmable controller is used to control the 
operation of a game played on an electronic gaming machine and the signed 
program is a game program or a component of a game program. 

Preferably multiple signatures may be applied to the game software, to 
10 ensure that only software approved by not only the manufacturer, but also 
the jurisdictional authority and optionally the casino itself, is executed by 
the machine 

Preferably also a system is provided for revoking signature keys. This 
can be password based - a password is entered which allows one of the 
13 public signatures stored in the machine to be changed. Alternatively, a 
revocation certificate can be used, which must be valid, or the revocation 
system can be time based, where the machine stores a set of signatures, good 
for say 10 years, and the current active signature is based upon the current 
system clock. 

20 A system of equivalent signatures is also preferably provided, such that 

any one of these signatures can be used as part of the verification. Ideally a 
manufacturer will have at least one signature for its office in each 
jurisdiction. Any one could be used to sign a game, but it would be apparent 
In the event of a problem where the responsibility would lie, and could be 

28 revoked easily. 

Preferably a system for version control Is also included, such that once 
a later version of software runs on a gaming machine it Is then impossible to 
run an earlier version of the same software. This would preferably 
permanently revoke faulty games once a fix had been issued. 

30 Preferably any signature and version changes are held In secure 

unforgeable logs updated after each change to help detect possible fraud.- 
Preferably also the unforgeable logs are Implemented using tamper-proof 
devices such as smartcards to ensure that the log can never be deleted. 
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Brief Description of the Drawings 

Embodiments of the present Invention will now be described by way of 
example with reference to the accompanying drawings in which: 

figure i illustrates a conventional gaining machine in which the 
present invention may be implemented; 

figure 2 is a block diagram of a control unit according to the present 
invention; 

Figure 3 is a diagrammatic representation of a method of signature 
generation and verification according to the present invention; 

figure 4 is a flow diagram of a software approval process according to 
the present invention; and 

figure 5 is a flow diagram illustrating a method of executing approved 
software according to the present invention. 
Detailed Description of the preferred embodiments 

In the following detailed description the methodology of the 
embodiments will be described, and it is to be understood that it is within 
the capabilities of the non-inventive worker in the art to introduce the 
methodology on any standard microprocessor-based gaming machine or 
gaming console by means of appropriate programming. 

Referring to figure i of the drawings, the first embodiment of the 
invention is illustrated in which a slot machine 40, of the type having a video 
display screen 41 which displays a plurality of rotatable reels 42 carrying 
symbols 43, is arranged to pay a prize on the occurrence of a predetermined 
symbol or combination of symbols. 

In the slot machine 40 illustrated in figure 1, the game is initiated by a 
push button 44, however, it will be recognized by persons skilled in the art 
that this operating mechanism might be replaced by a pull handle or other 
type of actuator in other embodiments of the invention. Hie top box 49 on 
top of the slot machine 40 carries the artwork panel 39 which displays the 
various winning combinations for which a prize Is paid on this machine. 

The program which implements the game and user interface is run on 
a standard gaming machine control processor 100 as illustrated schematically 
in figure 2. This processor forms part of a controller 110 which drives the 
video displayscreen 141 and receives Input signals from sensors 144. The 
sensors 144 may be touch sensors, however, in alternative embodiments 
these may be replaced by a pull handle or another type of actuator such as 



WO 00/33196 



6 



PCT/AUW/01056 



button 44 in figure 1. The controller 110 also receives input pulses from a 
mechanism 120 indicating the user has provided sufficient credit to begin 
playing. The mechanism 120 may be a coin input chute, el bank note 
acceptor (till acceptor], a credit card reader, or other type of validation 
device. The controller 120 also drives a payout mechanism 130 which for 
example may be a coin output 

The controller 110 also includes ROM 170 in which fixed and secure 
program components are held. This ROM may also contain part or all of a 
program to perform a program verification function for programs running on 
the CPU 100 out of RAM ISO or loaded onto or from the disk 180. 

Alternatively, the program verification may be performed by a stand 
alone verification system 140 interposed between the RAM 150, the disk 180 
and the CPU 100. The verification system may make use of a tamper proof 
storage element such as a smart card 180 (or a device containing a smart card 
chip, or the verification system 140 may itself be implemented as a smart 
card or smart card chip in which case, it will not require the separate smart 
card 180. An Input/Output function 190 is also provided tor the CPU to 
communicate with a gaming machine network for administration 
participation In system wide prizes and bonuses and for downloading of 
game programs. 

The game played on the machine shown in Figures 1 and 2 Is a 
relatively standard game which includes a 3 by 5 symbol display and allows 
multiple pay lines. 

Slot machines such as those of the type described with reference to 
figures 1 and 2 can be adapted to embody the present invention with 
generally only a software change to modify the functions of some of the user 
interfaces of the machine. 

The system, when built will consist of an electronic gaming machine, 
with standard features such as graphics capability, a monitor, sound output 
and interfaces to gaming hardware such as hoppers, bill acceptors etc. The 
gaming machine would also have a sophisticated central processor, say a 
Pentium or PowerPC for example, with a large amount of RAM, a storage 
device such as a hard disk, CD-ROM or remote network storage and 
optionally a smartcard Interface. 

The machine would furthermore have an unalterable EPROM which 
would have stored in it program code to perform the DSS algorithm, also 
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know as the USA. It would also contain code to perform the Secure Mash 
Algorithm tSHA-1), the designated U.S. Federal standard message digest 
algorithm. This EPROM would be able to be extracted and Inspected by the 
traditional means, in alternative Implementations, otlier digital signature 
5 algorithms could be used such as GOST, ESlGN or even the previously 
disclosed RSA method which requires encryption. 

figure 3, copied from the U.S. federal standard HPS 1B0-1, describes 
the operations that produce and verify a digital signature using DSA and 
SttA-i. An Important distinguishing characteristic of this system Is that it 

10 does not use encryption to produce a digital signature. It is thus not subject 
to export restrictions from the US and other countries. 

Each set of software that is to be installed in any gaming machine at 
present must be approved, both by the gaming Jurisdictional authority and by 
the machine manufacturer, tt also may need to be approved by the casino in 

15 which the machine will reside. In the preferred implementation, all 

interested parties will digitally sign each piece of approved software prior to 
installation. The process of game software being produced, approved and 
authenticated would proceed as in figure 4. 

These signatures will be stored with the software on a mass storage 

20 device inside the gaming machine. When the machine needs to load a piece 
of software, or upon an external command after a significant event such as a 
Jackpot payout, it will execute the SHA-1 program code in the fif ROM on the 
software being loaded, and then perform a USA verification operation using 
the SHA-1 output as one of the parameters. The DSA verification operation 

29 will be repeated for every digital signature stored with the software, and all 
must be valid, so that it is impossible to execute program code that has not 
been approved by the manufacturer, the jurisdictional authority and 
optionally the casino and/or other parties. The process of executing pre- 
approved software would proceed as in figure S. 

30 A significant benefit of multiple signatures, as opposed to other 
disclosed systems which use only one, is that it protects all parties from a 
rogue element working within either the manufacturer, the Jurisdiction or the 
casino. To successfully install a fraudulent piece of software in a gaming 
machine that uses this system would require a concerted conspiracy 

3S Involving trusted personnel working for all parties. 
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To perform the digital signature verification, It Is also necessary that 
the machine store public keys for the appropriate parties - Jurisdiction, casino 
and manufacturer. In the preferred Implementation, these keys are stored in 
fiEPRoKt, wTilcfi can tie modiffed ^ 

£PROM, under strict security conditions. This enables signatures to be 
revoked If compromised, or periodically updated. In an alternative 
Implementation, a plurality of signature public keys are stored in the 
unalterable ERROM and variables stored In EERROM Indicate which of these 
signatures are active. In another alternative implementation, a tamper-proof 
device such as a smartcard stores the public keys. The program code in the 
EPROM passes the output from the SMA-1 algorithm to the smartcard along 
with the signature values stored with the software. The smartcard then 
performs the DSS or other signature verification and returns either an 
authentication or denial code to the gaming machine. Once revoked, the 
smartcard will not allow keys to be re-enabled. 

Since it will be possible to change the digital signatures that 
authenticate software running in the machine, it is important that an 
unfot^geable log is kept of all software changes or signature changes. This can 
be achieved by the use of a hash chain, where every entry in the log is 
'hashed 1 with the previous log entry's hash value. In a preferred 
implementation, this hash chain, or the most recent part of it, is stored 
within a tamper-proof device such as a smartcard or the traditionally used 
logic cage. A smartcard is preferred, since it can have a secret unique 
identification code, and is thus non-reproducible and unfo^geable itself. 
Program code stored in the unalterable ERROM accesses the smartcard 
during signature or software update. Since the latest hash value would 
always be stored on the smartcard, It would be impossible to change the 
software without creating a log entry. This would ensure that all 
modifications to the software stored on the machine was accurately logged 
which L would be extremely useful In the event of a major Jackpot payout. 
The ERROM can be proven to be unaltered by 1 the conventional means of 
placing it in a verification device. 

A more detailed description of a possible Implementation of a hash- 
chain unforgeable log can be found in the paper "Cryptographic Support for 
Secure Logs on tJntrusted Machines" - see references above. 
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Each signature for a file would be linked to the file, but need not be 
contained within the file. In the event of a signature key revocation, new 
signatures may have to be downloaded from a network device or using the 
machine's operalbi mode! In Cfils case." Ifie new signatures being 
downloaded would Indicate which file they are to attach to, and which 
signature they replace. This would be more economical than re-downloading 
the whole software set upon a signature key change. 

In an alternative Implementation, multiple public keys for each 
corresponding signature are stored. At any one time, only one for each 
interested party would be active. The schedule for selecting which public 
keys are active could be time-based, so signatures would in effect have a 
lifetime. Periodically, the machine would have to be updated with the new 
signatures as either a maintenance task or upon the payments of an 
additional license fee to the manufacturer or Jurisdiction. 

In the event of an authentication failure due to signatures (and 
therefore the license to run the software) expiring, it could be implemented 
that the casino would have a 'grace 1 period to obtain new keys before the 
machine completely refused to run the software, for example, the machine 
could display a notice, similar to that found on computer shareware 
products, informing of the license explty that would have to be manually 
accepted by the machine operator every time the machine was reset. 

In the alternative implementation, It would also be possible to have 
multiple signatures active for each party at any one time. One possibility 
would be that these would correspond to different divisions within the 
manufacturer or jurisdiction. This would aid tracing in the event of a 
software or security failure. 

Another security aspect that will be implemented in the gaming 
machine is the concept of version control. Each digitally signed piece of 
software stored on the mass storage device within the machine will have an 
associated identification code and version number. It will be Impossible to 
download software with a corresponding identification code and an earlier 
version number. 

It will be appreciated by persons skilled in the art that numerous 
variations and/or modifications may be made to the Invention as shown in 
the specific embodiments without departing from the spirit or scope of the 
invention as broadly described. The present embodiments are, therefore, to 
be considered in all respects as illustrative and not restrictive. 
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CLAIMS 

1. A programmable controller, Including a readable and writable storage 
means to hold a program during Its execution by tbejiragmi^able 
controller, and program authentication means comprising digital signature 
verification means which verifies a digital signature associated with the 
program and prevents execution of the program If the digital signature Is not 
valid, the digital signature being generated by a method that does not Include 
encryption such that de-encryptlon Is not performed during the digital 
signature verification. 

2. The controller as claimed In claim 1, wherein a plurality of signatures 
are applied to the game software. 

3. A programmable controller, Including a readable and writable storage 
means to hold a program during Its execution by the programmable 
controller, and program authentication means comprising digital signature 
verification means which verifies each of a plurality of digital signatures 
associated with the program and prevents execution of the program if any 
one of the digital signatures Is not valid. 

4 the electronic gaming machine as claimed in claim 2 or 3, wherein 
one of the digital signatures Is applied to the software by or on behalf of a 
manufacturer of the electronic gaming machine. 

3. The controller as claimed In claim 2, 3 or 4, wherein one of the digital 
signatures Is applied to the software by or on behalf of a Jurisdictional 
authority that has Jurisdiction to authorize use of the game in a location in 
which the game Is Installed. 

6. The controller as claimed In claim 2, 3, 4 or S, wherein one of the 
digital signatures Is applied to the software by or on behalf of a casino in 
which the electronic gaming machine Is installed. 

7. The controller as claimed In any one of claims 1 to 8, wherein the 
programmable controller Is used to control the operation of a game played on 
an electronic gaming machine and the program with which the digital 
signature Is associated is a game program or a component of a game program. 

8. The controller as claimed In any one of claims 1 to 7, wherein the 
signature verification means stores one or more public signature keys in 
secure storage and uses a public signature key from the secure storage to 
verify the digital signature associated with the game program. 
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9. The controller as claimed lti claim fl, wherein the signature verification 
means Includes signature revocation means for removing public signature 
keys from a set of valid keys as a method of revoking signature keys. 

10. The controller as claimed in claim 9, wherein die signature revocation 
means is activated by a password such that when the password is entered it 
allows a particular public signature stored in the verification means to be 
changed or deleted. 

11. The controller as claimed in claim 9 or 10, wherein a digital revocation 
certificate can be used, which must be validated by the validation means 
before it causes a public signature key to be revoked. 

12. The controller as claimed in claim 9, 10 or 11, wherein revocation is 
time based, whereby the machine stores a set of public signature keys, which 
are valid for a fixed period of time, after which they are automatically 
revoked. 

13. The controller as claimed in claim 12, wherein the fixed period before 
automatic revocation is a period of 10 years. 

14. The controller as claimed in claim 12 or 13, wherein identification of a 
current active public signature is based upon comparison of a time stamp 
embedded in the signature with a time and date obtained from a current time 
value from a system clock 

15. The controller as claimed in any one of claims fl to 14, wherein a 
plurality of equivalent signatures are provided in the secure storage, such 
that any one of the equivalent signatures can be used as part of the 
verification authorization. 

IB. The controller as claimed in claim IS, wherein each of the equivalent 
signatures is identifiable as being associated with a person or entity 
responsible for issuing or authorizing the program 

17. The controller as claimed in any one of claims 1 to 10, wherein the 
verification program records versions of a program that have been verified 
and will not re-verlfy versions earlier than the latest version that it has 
already verified. 

18. The controller as claimed In claim 17, wherein the record of verified 
program versions Is stored In a secure log and entries in the record are 
unforgable and unalterable after being written. 

19. The controller as claimed in claim 18, wherein a record of digital 
signature key updates Is kept in the secure log. 
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20. The controller as claimed In claim 18 or 19, wherein the secure log Is 
recorded In a tamper proof device. 

21 The controller as claimed in claim 20, wherein the tamper proof device 
Is a smartcard or contains a smartcarti chip. """" 

22. A method of verifying a program or a program component for a 
programmable controller, including a readable and writable storage means to 
hold a program during Its execution by the programmable controller, and 
program authentication means comprising digital signature verification 
means which verifies a digital signature associated with the program, the 
digital signature being generated by a method that does not Include 
encryption and the method Including a step of verifying the digital signature 
against a key, In which de-encryptlon Is not performed during the digital 
signature verification, and preventing execution of the program If the digital 
signature is not valid. 

23. The method as claimed in claim 22, a plurality of signatures ate 
applied to the game software. 

24. A method of verifying a program or a program component for a 
programmable controller, Including a readable and writable storage means to 
hold a program during Its execution by the programmable controller, and 
program authentication means comprising digital signature verification 
means which verifies each of a plurality of digital signatures associated with 
the program, and the method Including steps of verifying each of the digital 
signatures against a respective key, and preventing execution of the program 
if any one of the the digital signatures is not valid. 

25. The method as claimed in claim 23 or 24, wherein one of the digital 
signatures Is applied to the software by or on behalf of a manufacturer of the 
electronic gaming machine. 

2B. The method as claimed In claim 23 or 24 or 28, wherein one of the 
digital signatures is applied to the software by or on behalf of a Jurisdictional 
authority that has jurisdiction to authorize use of the game in a location in 
which the game is installed. 

27. The method as claimed in claim 23 or 24 or 25 or 2B, wherein one of 
the digital signatures Is applied to the software by or on behalf of a casino in 
which the electronic gaming machine is Installed. 

28. The method as claimed in any one of claims 22 to 27, wherein the 
programmable controller Is used to control the operation of a game played on 
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an electronic gaming machine and the program with which the digital 
signature is associated is a game program or a component of a game program. 

29. the method as claimed In any one of claims_22 to 28, wherein the 
signature verification means stores one or more public signature keys in 
secure storage and uses a public signature key from the secure storage to 
verify the digital signature associated with the game program. 

30. the method as claimed in claim 29, wherein the signature verification 
means Includes signature revocation means for removing public signature 
keys from a set of valid keys as a method of revoking signature keys. 

31. The method as claimed in claim 30, wherein the signature revocation 
means is activated by a password such that when the password is entered it 
allows a particular public signature stored in the verification means to be 
changed or deleted. 

32. The method as claimed in claim 30 or 31, wherein a digital revocation 
certificate can be used, which must be validated by the validation means 
before It causes a public signature key to be revoked. 

33. The method as claimed in claim 30, 31 or 32, wherein revocation is 
time based, whereby the machine stores a set of public signature keys, which 
are valid for a fixed period of time, after which they are automatically 
revoked. 

34. The method as claimed In claim 33, wherein the fixed period before 
automatic revocation is a period of 10 years. 

35. The method as claimed in claim 33 or 34, wherein identification of a 
current active public signature is based upon comparison of a time stamp 
embedded In the signature with a time and date obtained from a current time 
value from a system clock 

38. The method as claimed in any one of claims 29 to 35, wherein a 
plurality of equivalent signatures are provided in the secure storage, such 
that any one of the equivalent signatures tan be used as part of the 
verification. 

37. The method as claimed In claim 38, wherein each of the equivalent 
signatures Is Identifiable as being associated with a person or entity 
responsible for issuing or authorizing the program. 

38. The method as claimed in any one of claims 22 to 37, wherein the 
verification program records versions of a program that have been verified 
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and will not re-verify versions earlier than the latest version that it has 
already verified 

.-?$ B . method, as claimed In claim 38, wherein the record of verified 
program versions is stored in a secure fog and entries in the recordate 
unforgahle and unalterable after being written. 

40. The method as claimed in claim 30, wherein a record of digital 
signature key updates is kept in the secure log. 

41. The method as claimed in claim 39 or 40, wherein the secure log is 
recorded in a tamper proof device. 

42. The method as claimed in claim 41, wherein the tamper proof device is 
a smartcard or contains a smartcard chip. 
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